Security Scan Report: fitzgeraldsva.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 3 countries across 18 domains to perform 117 HTTP transactions. The main domain is fitzgeraldsva.com and was registered 2 years 7 months ago.

Submitted URL: https://fitzgeraldsva.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate Irish pub site compromised and injected with a CRITICAL ClickFix/EtherHiding kit: fake Chrome-update overlay loads a blockchain-resolved next stage. Do not interact; report to the site owner.

Risk Factors (5)
Injected ClickFix fake browser-update overlay attempting to get visitors to paste commands into a terminal
EtherHiding: next-stage payload address fetched from a Polygon smart contract, evading takedown
Obfuscated script concealing blockchain RPC and exploit-kit hosts
Multiple threat-feed matches on the primary domain and on third-party resources the page loads
Legitimate restaurant site (Fitzgerald's Irish Pub, Tappahannock VA) is compromised and serving malware
Domain age information unavailable

Details

Page Title

Home - Fitzgerald’s Irish Pub and Sports Barother network

Scan Type

public

Domain Name Analysis

Domain 'fitzgeraldsva.com' uses the commercial generic top-level domain (.com). The second-level label 'fitzgeraldsva' is 13 characters long split between 4 vowels and 9 consonants. Tokenizing the label suggests 2 words: fitzgerald, sva. Average segment length settles at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fitzgeraldsva.com

Page Load Overview

6.89s
Total Load Time
21.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:9,369 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
news/blog
60%

Detected Features

Articles
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21192.169.223.107United States
AS398787GoDaddy.com, LLC
4192.178.183.97Google · CDNUnited States
AS15169Google LLC
474.125.29.95Google · CDNUnited States
AS15169Google LLC
499.84.152.129Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
413.226.244.15Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
42.21.239.4Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
4142.251.13.94Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
11725--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14F54AF33A715144633EB03E5A11B7699E4685127F6824EDDF2BCE1A8B7CD8E63132339

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:goO84AXfeLoDuud8OwpA/yAqARfATSpfUz2UbISWlwzVCLlUpeE9jJp4cG03C9yW:I8ZmC/Pq7zfsjWpeE9h3lLaskKi+gF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:284015:ACwAaBgVyCYhwcAkBGCAiQhYUgahYSUQEEqiDN1IrCAaRODZpnAyRfKAQNQcgAASFMWM0ASgAANaEIwwCrLMYgIBSSXACBEI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fe7e7e7ffffc381
Perceptual Hash:b6e31cc89dc22778
Difference Hash:a80c4d0c14001b37
Wavelet Hash:00c3c3e7e7ff8181
Color Hash:#bfbb40

Other Hashes

Crop Resistant:a80c4d0c14001b37

Scan History

Scan history not available

Unable to load historical scan data